Overview

overview

10

Static

static

10

8bff62ca72...18.exe

windows7-x64

10

8bff62ca72...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8bff62ca72154172e99f6ed165082bc7_JaffaCakes118

  • Size

    2.6MB

  • MD5

    8bff62ca72154172e99f6ed165082bc7

  • SHA1

    3077b20b9fd432b2d2a99cbcd8352f37cba562fc

  • SHA256

    3cba11f01bef5dc72eee89438aa4dae7745c628374cbae1f6de0b16fe03b51ee

  • SHA512

    64c5a4ad402d626290c434ed1d8d1531870ddbd60cb9bbe1185c1c4b9031f19cdebac77af88f0404220bfcae1d9973d6aa0139d77a8de1f63326ac3e612d7d9b

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlv:86SIROiFJiwp0xlrlv

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8bff62ca72154172e99f6ed165082bc7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections